Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5355d70-db90-3f38-a26e-0d2de9b483bf.roa
File:                     b5355d70-db90-3f38-a26e-0d2de9b483bf.roa (raw, json)
Hash identifier:          mMGGwUFeKlV0gxBWxxfgDExG6bRP2xXQnVT+5yJ/nEE=
Subject key identifier:   47:1B:20:FB:A8:0A:BB:71:77:B9:80:0E:5B:8F:80:76:34:0B:BC:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B283FD3338A8C476F81540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5355d70-db90-3f38-a26e-0d2de9b483bf.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        2600:1406:e400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:83:fd:33:38:a8:c4:76:f8:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=5454940d-a72a-442a-b532-c35ed9aed5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:5a:af:3a:24:bb:10:f0:b8:7b:90:e3:8b:
                    eb:3c:83:cc:8f:bf:a3:0a:2b:94:b4:86:70:eb:82:
                    0d:a0:35:cc:4d:e3:5b:b6:72:c9:82:90:e6:4b:29:
                    83:1b:86:0a:c3:8e:89:7f:98:a9:7b:1f:ed:7b:00:
                    31:a5:b4:2c:05:46:d2:b9:8f:9c:26:c1:90:bf:8d:
                    3d:6c:d8:79:72:87:56:b7:31:54:75:20:20:64:c0:
                    ea:ac:b9:ca:ac:92:d8:f5:c7:2c:2c:82:1c:bc:65:
                    f9:de:b1:fd:96:c4:48:cb:5c:60:92:38:c7:94:a0:
                    e9:fc:e1:19:fc:9a:ed:7e:d9:cc:ca:be:27:ac:1b:
                    80:da:e7:fd:67:7c:21:92:5f:1d:ec:e5:4a:7a:97:
                    91:1c:bb:d3:ff:6e:aa:d5:3c:59:7b:96:a7:a5:ed:
                    31:ec:8c:c9:aa:4c:89:bf:1f:d1:ce:bc:22:b2:e4:
                    75:5d:a0:b1:02:b8:f3:a1:e3:5c:fb:be:5f:9c:be:
                    75:a8:33:56:65:cb:cc:00:38:d7:7b:ef:33:ee:e4:
                    ee:d0:ca:a3:ba:23:a2:f1:0d:d5:bb:a4:8e:ce:50:
                    17:45:06:f0:a7:d2:8d:98:1f:f6:77:42:4c:6b:f1:
                    ad:cb:f6:b2:7f:3a:b7:70:83:b1:69:9a:9a:97:39:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:20:FB:A8:0A:BB:71:77:B9:80:0E:5B:8F:80:76:34:0B:BC:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5355d70-db90-3f38-a26e-0d2de9b483bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:e400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:65:8e:7c:cd:2e:15:69:1c:e6:d1:5c:a9:97:6d:fb:ae:a4:
         ab:61:00:d9:e1:11:b9:f0:d7:a9:44:2d:6f:47:3b:7f:d8:8c:
         fd:74:44:11:db:2d:f3:63:9b:72:ca:10:75:14:aa:3f:4d:5f:
         23:61:f4:02:ea:fe:03:81:0c:bb:52:8b:a4:44:f7:80:0d:34:
         cf:4e:9b:57:7f:fb:53:84:fb:65:67:5a:0b:3a:39:f6:03:fd:
         2a:5d:49:79:8f:9c:dc:5b:76:4d:fa:39:84:53:86:7c:65:35:
         ba:56:4f:f6:4c:2e:d0:bd:1c:dc:b2:01:78:14:10:2a:e9:28:
         61:85:04:10:0c:6c:0b:64:fd:83:53:16:f6:4a:e9:f4:6f:cf:
         3f:22:dd:6e:2f:f7:f1:7c:05:b7:7e:26:66:41:73:92:2b:7b:
         ba:91:30:3b:37:c1:4d:91:3f:b5:1f:df:67:48:6b:5f:19:d2:
         96:6b:e0:40:fa:23:39:3d:8b:a0:4a:b0:b6:a7:b5:fe:97:c4:
         c0:e1:76:e6:77:e2:56:29:81:01:51:50:29:57:4a:87:7d:be:
         f1:dc:69:ff:ff:13:58:9e:c3:96:f1:68:1e:ec:f8:7a:e1:7d:
         a3:18:2e:f7:c0:90:cd:99:3a:f2:6f:bd:f4:c0:3b:fe:9e:83:
         c1:74:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:13 2026 by rpki-client